Bryan Foss the real effect of the cyber attack on JLR is not known, other than what is reported in the media.

← Back to Blog

Bryan Foss the real effect of the cyber attack on JLR is not known, other than what is reported in the media. But the effects of the hack on the UK economy are. What is certain is that while the hack is publicly reported, the threat actors were highly accomplished, and the cybersecurity of Jaguar was not as good as it could have been. Saying that, if, as is being reported, the threat actors were indeed nation-state-backed, then detection was key and defense would have been hard. But that is a fact of life.

The challenge for the UK government is now how to play catch-up on UK cybersecurity. No amount of government money can address cybersecurity, as countries such as the US and EU 27, for one very simple reason – Attack Surface. The are millions of organisations in the UK that require cybersecurity, and the UK lacks the strategy, knowledge, skills, experience, resources, and tools to put up a realistic defence against cyber attacks. The attack surface is far too broad.

If one considers just the EU and its Cyber program under EU NIS 2 to defend the Critical National Infrastructure. There are at least 150,000 affected companies, and the EU has had to introduce a broad program of regulation to ensure those companies implement cybersecurity, or face civil and criminal sanctions. The NIS program will take several years before it’s fully implemented and delivering results, but that’s the road that has to be taken to secure CNI.

The UK and its public and private sectors are unprepared for a cyberattack. One wonders the strategy the UK will adopt, how long it will take, and how much money the government is willing to spend on a whole-of-society problem.

@Thaddeus Dziekanowski Brian D. McCarthy Faisal Khan

Veritas GRC

#cybersecurity #cyberriskmanagement

https://lnkd.in/eB8Y4spP

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7383063216278491136

Categories

Cybersecurity, National Security & Defence, Regulation & Compliance

Tags